Skip to content

Support Consul Connect Native integration #643

Description

@Walliee

Is your feature request related to a problem? Please describe.
While it's possible to configure Spring application with a sidecar proxy to use Consul Connect today, it would nice to have native support using spring-cloud-consul.

Describe the solution you'd like
Consul Connect has three components:

  • Service Discovery (support for this already exists in spring-cloud-consul)
  • mTLS
  • Authorization

In order to support Consul Connect Native App integration, changes need to be client and server-side:

  • Consul connect enabled clients need to be configured such on outbound connections they provide service certificate as the client certificate and verify the remote certificate against the public CA roots.
  • Consul connect enabled servers need to be configured such that on inbound connections they verify the client certificate against the public CA roots and verify if the connection is authorized.

Additional context
https://www.consul.io/docs/connect/native
https://www.consul.io/api-docs/agent/connect#connect-agent-http-api

I've already created an issue on the consul-api project to add Connect API support. Ecwid/consul-api#207

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions